PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
29abc87b373555bb251dee66369de4dd5f27a3cba88561fa35f0f46f77423c97.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29abc87b373555bb251dee66369de4dd5f27a3cba88561fa35f0f46f77423c97.dll
Resource
win10v2004-20240802-en
Target
29abc87b373555bb251dee66369de4dd5f27a3cba88561fa35f0f46f77423c97
Size
3.5MB
MD5
633ab3037b6ea9a90e6017ce461eec7d
SHA1
19c0d9826951e5fd18e82f48d85b9c17f7e8d6ee
SHA256
29abc87b373555bb251dee66369de4dd5f27a3cba88561fa35f0f46f77423c97
SHA512
46d37fe9b5c5b943089e63b73ca7cf95072e5f9a20d8b11efdb0d7b7b86afbde33f9042014cad839c0e90efc665a2ef8479d9dd6f6e1ffa7b3200ddac0b717ee
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zf:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kb
Checks for missing Authenticode signature.
resource |
---|
29abc87b373555bb251dee66369de4dd5f27a3cba88561fa35f0f46f77423c97 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ